Anso 8cf10c45f0 fix(sso): preserve granular roles across enabled role synchronization (#1875) ...

Extend the sso_role_sync condition in SSOService.provisionUser so the
IdP-derived role is applied only while the stored role is Admin or Viewer.
Granular roles (deployer, node-admin, auditor) remain manually
authoritative. Replace the misleading inline comment with one accurate
block explaining the setting gate, coarse-role sync, granular-role
preservation, and independent email sync.

Backed by parameterized regression tests for all three granular roles.

2026-09-14 14:41:29 -04:00

..

alerts-notifications.mdx

feat(fleet): detect and update from a new sencho-dev:dev build (#1871)

2026-08-30 15:54:19 -04:00

api-tokens.mdx

feat: graduate Host Console to Community admins (#1669)

2026-07-23 12:59:53 -04:00

app-store.mdx

docs: v1 docs refresh (batch 7) (#1627)

2026-07-21 09:13:12 -04:00

appearance.mdx

feat(navigation): make Compact Launcher the default desktop style (#1890)

2026-09-05 20:03:48 -04:00

atomic-deployments.mdx

feat(recovery): complete authored-project atomic rollback generations (#1819)

2026-08-13 03:48:09 -04:00

audit-log.mdx

fix(rbac): make complete built-in RBAC available on Community (#1793)

2026-08-07 23:50:53 -04:00

auto-heal-policies.mdx

feat: surface stack Monitor from header and service cards (#1693)

2026-07-23 23:25:07 -04:00

auto-update-policies.mdx

fix(image-updates): explain persistent digest rebuilds after update (#1784)

2026-08-06 09:22:53 -04:00

blueprint-model.mdx

feat(git): add GitOps revision store and Direct apply transitions (#1835)

2026-08-27 10:25:27 -04:00

compose-doctor.mdx

docs(self-hosting): document Docker socket proxy permission profiles (#1798)

2026-08-08 03:17:56 -04:00

compose-networking.mdx

fix(networking): ignore verified Mesh attachments in drift (#1729)

2026-07-29 12:55:30 -04:00

compose-storage.mdx

docs: v1 docs refresh (batch 7) (#1627)

2026-07-21 09:13:12 -04:00

cve-suppressions.mdx

fix(security): tie fixable CVE posture to image-update evidence (#1815)

2026-08-12 15:02:14 -04:00

dashboard.mdx

feat(git): add GitOps revision store and Direct apply transitions (#1835)

2026-08-27 10:25:27 -04:00

deep-links.mdx

fix: assorted UI/UX polish fixes (#1670)

2026-07-26 03:25:07 -04:00

deploy-enforcement.mdx

docs: v1 docs refresh (batch 7) (#1627)

2026-07-21 09:13:12 -04:00

deploy-progress.mdx

docs: v1 docs refresh (batch 7) (#1627)

2026-07-21 09:13:12 -04:00

docker-label-audit.mdx

docs: v1 docs refresh (batch 7) (#1627)

2026-07-21 09:13:12 -04:00

editor.mdx

docs: document LinuxServer socket-proxy ALLOW_LOGS (#1848)

2026-08-21 19:27:25 -04:00

environment-guardrails.mdx

docs: v1 docs refresh (batch 7) (#1627)

2026-07-21 09:13:12 -04:00

fleet-actions.mdx

fix(resources): attribute free images to managed prune by repository family (#1769)

2026-08-04 16:38:37 -04:00

fleet-backups.mdx

feat(recovery): complete authored-project atomic rollback generations (#1819)

2026-08-13 03:48:09 -04:00

fleet-dossier.mdx

docs: v1 docs refresh (batch 7) (#1627)

2026-07-21 09:13:12 -04:00

fleet-federation.mdx

docs: v1 docs refresh (batch 7) (#1627)

2026-07-21 09:13:12 -04:00

fleet-secrets.mdx

feat(fleet-secrets): graduate encrypted fleet-wide environment bundles to Community (#1758)

2026-08-03 08:42:46 -04:00

fleet-sync.mdx

docs: v1 docs refresh (batch 8) (#1797)

2026-08-08 13:12:11 -04:00

fleet-view.mdx

feat(fleet): detect and update from a new sencho-dev:dev build (#1871)

2026-08-30 15:54:19 -04:00

git-sources.mdx

docs(git): publish a versioned Git transport support matrix (#1883)

2026-09-01 21:56:02 -04:00

git-transport-support.mdx

feat(git): classify Git host rate-limit responses as their own error state (#1884)

2026-09-02 12:15:02 +00:00

global-observability.mdx

docs: document LinuxServer socket-proxy ALLOW_LOGS (#1848)

2026-08-21 19:27:25 -04:00

global-search.mdx

feat(navigation): make Compact Launcher the default desktop style (#1890)

2026-09-05 20:03:48 -04:00

health-gated-updates.mdx

feat(recovery): complete authored-project atomic rollback generations (#1819)

2026-08-13 03:48:09 -04:00

host-console.mdx

fix(console): clarify Pilot Agent host-console unavailability (#1868)

2026-08-28 23:30:53 -04:00

licensing.mdx

Surface runtime build identity across About, shell, and Admiral Account (#1899)

2026-09-07 14:20:47 -04:00

multi-node.mdx

fix(security): harden authentication and outbound targets (#1877)

2026-09-01 16:52:12 -04:00

networking.mdx

feat: guide missing external network creation during deploy (#1645)

2026-07-17 14:51:00 -04:00

node-compatibility.mdx

fix: condition --volumes in downStack() on the removeVolumes option (#1764)

2026-08-04 13:04:21 -04:00

overview.mdx

fix(rbac): make complete built-in RBAC available on Community (#1793)

2026-08-07 23:50:53 -04:00

pilot-agent.mdx

fix(pilot): preserve tunnel JWT across upgrade 401 reconnects (#1818)

2026-08-12 15:06:41 -04:00

private-registries.mdx

feat: deliver hub registry credentials to remote Compose targets (#1866)

2026-08-29 19:07:36 -04:00

rbac.mdx

fix(sso): preserve granular roles across enabled role synchronization (#1875)

2026-09-14 14:41:29 -04:00

remote-updates.mdx

feat(fleet): detect and update from a new sencho-dev:dev build (#1871)

2026-08-30 15:54:19 -04:00

resources.mdx

fix: untag reviewed image names during prune (#1836)

2026-08-20 07:53:57 -04:00

scheduled-operations.mdx

docs(self-hosting): document Docker socket proxy permission profiles (#1798)

2026-08-08 03:17:56 -04:00

security.mdx

fix(security): tie fixable CVE posture to image-update evidence (#1815)

2026-08-12 15:02:14 -04:00

sencho-mesh.mdx

docs(self-hosting): document Docker socket proxy permission profiles (#1798)

2026-08-08 03:17:56 -04:00

sidebar.mdx

docs: v1 docs refresh (batch 7) (#1627)

2026-07-21 09:13:12 -04:00

sso.mdx

fix(sso): preserve granular roles across enabled role synchronization (#1875)

2026-09-14 14:41:29 -04:00

stack-activity.mdx

docs: v1 docs refresh (batch 7) (#1627)

2026-07-21 09:13:12 -04:00

stack-dossier.mdx

feat(recovery): complete authored-project atomic rollback generations (#1819)

2026-08-13 03:48:09 -04:00

stack-drift.mdx

feat(git): add GitOps revision store and Direct apply transitions (#1835)

2026-08-27 10:25:27 -04:00

stack-file-explorer.mdx

docs(self-hosting): document Docker socket proxy permission profiles (#1798)

2026-08-08 03:17:56 -04:00

stack-labels.mdx

feat(schedules): auto-update stacks by Stack Label (#1717)

2026-07-28 13:00:47 -04:00

stack-management.mdx

feat(git): SSH deploy keys with strict host-key verification (#1867)

2026-08-29 16:52:32 -04:00

two-factor-authentication.mdx

docs: v1 docs refresh (batch 7) (#1627)

2026-07-21 09:13:12 -04:00

vulnerability-scanning.mdx

docs: v1 docs refresh (batch 7) (#1627)

2026-07-21 09:13:12 -04:00

webhooks.mdx

docs: v1 docs refresh (batch 7) (#1627)

2026-07-21 09:13:12 -04:00